Mapping of LTI params to OmniAuth auth hash should be configurable; Unauthorized exception should not raise NoMethodError